Data Security andData Privacy — Learn free

Self-check

Questions 1–10 of 10

1. What is Data Security fundamentally about?
Question 1A. Protection: keeping data confidential, accurate and accessible only to those who are authorisedB. Rights: governing who may use data, for what purpose and under what conditionsC. Compliance with contracts, policies and consent agreementsD. Minimising the amount of personal data an organisation collectsE. Ensuring data is used ethically across its lifecycle
2. What do the three letters of the CIA of data stand for in Data Security?
Question 2A. Consent, Identity and AuthorisationB. Confidentiality, Integrity and AvailabilityC. Control, Inspection and AuditingD. Classification, Isolation and ArchivingE. Compliance, Investigation and Accountability
3. Which of the following is NOT listed as a Data Security technique?
Question 3A. Access managementB. EncryptionC. Consent managementD. MaskingE. Breach detection
4. With which jurisdictions is the PDPA associated as an example of a data privacy law?
Question 4A. EuropeB. The United StatesC. Australia and New ZealandD. Singapore and MalaysiaE. The United Kingdom
5. How is the relationship between Data Security and Data Privacy described?
Question 5A. Symmetric: each can exist fully without the otherB. Identical: the two terms mean the same thing in practiceC. Hierarchical: privacy is a subset of securityD. Independent: neither has any bearing on the otherE. Asymmetric: security can exist without privacy, but privacy cannot exist without security
6. What does the office access card analogy illustrate about Data Security and Data Privacy?
Question 6A. The card requires security because it controls entry, but openly displaying your name on it is not a privacy concernB. The card requires privacy because your name is on it, but losing it is not a security concernC. The card requires neither security nor privacy because it only opens doorsD. The card should be masked with dots or asterisks like a passwordE. The card is a privacy concern only when it is used across borders
7. Why is a password said to require both Data Security and Data Privacy?
Question 7A. Because it must be changed regularly and stored in a databaseB. Because it must be protected from theft and must also remain unseen, which is why systems mask it with dots or asterisksC. Because it is personally identifiable information regulated by the GDPRD. Because it controls entry to a building as well as to a systemE. Because it must be shared with the security team and the privacy officer
8. Which phrase summarises the difference between Data Security and Data Privacy?
Question 8A. Security governs the purpose, while privacy defends the perimeterB. Security is legal and ethical, while privacy is technicalC. Security defends the perimeter, while privacy governs the purposeD. Security is optional, while privacy is mandatoryE. Security is about rights, while privacy is about protection
9. Which of the following is NOT listed as a consequence for enterprises that neglect the dual lens of Data Security and Data Privacy?
Question 9A. Regulatory finesB. Reputational damageC. Customer attritionD. Slower database query performanceE. Ethical scandals
10. How does Data Privacy require personally identifiable information (PII) to be handled?
Question 10A. Collected in full, stored indefinitely and shared with partnersB. Encrypted at rest but otherwise used without restrictionC. Collected only from customers who have an office access cardD. Deleted immediately after first useE. Collected minimally, used ethically and safeguarded throughout its lifecycle